EUVD-2022-30006

Malicious code in bioql PyPI...

EUVD-2022-51025

Malicious code in bioql PyPI...

EUVD-2024-34217

Malicious code in bioql PyPI...

EUVD-2025-9040

Malicious code in bioql PyPI...

EUVD-2021-30323

Malicious code in bioql PyPI...

EUVD-2022-44178

Malicious code in bioql PyPI...

EUVD-2022-1873

Malicious code in bioql PyPI...

EUVD-2022-3097

Malicious code in bioql PyPI...

EUVD-2022-37686

Malicious code in bioql PyPI...

EUVD-2024-51649

Malicious code in bioql PyPI...

EUVD-2021-9172

Malicious code in bioql PyPI...

EUVD-2024-21002

Malicious code in bioql PyPI...

EUVD-2022-40947

Malicious code in bioql PyPI...

EUVD-2022-44601

Malicious code in bioql PyPI...

EUVD-2025-23195

Malicious code in bioql PyPI...

EUVD-2024-25261

Malicious code in bioql PyPI...

EUVD-2025-12226

Malicious code in bioql PyPI...

CVE-2025-59774

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59760

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover

Summary Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering such as sending a link via email or chat, an attacker may trick the users of a web...